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Foreword 



rd , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 
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1 Scope 

The present document defines: 

a) an identification plan for mobile subscribers in the GSM system; 

b) principles of assigning telephone and ISDN numbers to MSs in the country of registration of the MS; 

c) principles of assigning Mobile Station (MS) roaming numbers to visiting MSs; 

d) an identification plan for location areas, routing areas, and base stations in the GSM system; 

e) an identification plan for MSCs, SGSNs, GGSNs, and location registers in the GSM system; 

f) principles of assigning international mobile equipment identities; 

g) principles of assigning zones for regional subscription; 

h) an identification plan for groups of subscribers to the Voice Group Call Service (VGCS) and to the Voice 
Broadcast Service (VBS); and identification plan for voice group calls and voice broadcast calls; an identification 
plan for group call areas; 

i) principles for assigning Packet Data Protocol (PDP) addresses to mobile stations; 

j) an identification plan for point-to-multipoint data transmission groups. 



1.1 References 



The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 



• 



References are either specific (identified by date of publication, edition number, version number, etc.) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including 
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same 
Release as the present document. 

[1] GSM 01.04: "Digital cellular telecommunications system (Phase 2+); Abbreviations and 

acronyms". 

[2] GSM 03.08: "Digital cellular telecommunications system (Phase 2+); Organization of subscriber 

data". 

[3] GSM 03.20: "Digital cellular telecommunications system (Phase 2+); Security related network 

functions". 

[4] Void 

[5] GSM 03.70: "Digital cellular telecommunications system (Phase 2+); Routeing of calls to/from 

PubUc Data Networks (PDN)". 

[6] GSM 04.08: "Digital cellular telecommunications system (Phase 2+); Mobile radio interface layer 

3 specification". 

[7] GSM 09.03: "Digital cellular telecommunications system (Phase 2+); Signalling requirements on 

interworking between the Integrated Services Digital Network (ISDN) or Public Switched 
Telephone Network (PSTN) and the Pubhc Land Mobile Network (PLMN)". 
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[8] GSM 09.60: "Digital cellular telecommunications system (Phase 2+); General Packet Radio 

Service (GPRS); GPRS Tunnelling Protocol (GTP) across the Gn and Gp Interface". 

[9] GSM 11.11: "Digital cellular telecommunications system (Phase 2+); Specification of the 

Subscriber Identity Module - Mobile Equipment (SIM - ME) interface". 

[10] CCITT Recommendation E.164: "Numbering plan for the ISDN era". 

[II] CCITT Recommendation E.212: "Identification plan for land MSs". 

[12] CCITT Recommendation E.213: "Telephone and ISDN numbering plan for land MSs in public 

land mobile networks (PLMN)". 

[13] CCITT Recommendation X.121: "International numbering plan for public data networks". 

[14] RFC 791: "Internet Protocol". 

[15] RFC 1883: "Internet Protocol, Version 6 (IPv6) Specification". 

1 .2 Abbreviations 

Abbreviations used in the present document are listed in GSM 01.04. 

1 .3 General comments to references 

The identification plan for mobile subscribers defined below is that defined in CCITT Recommendation E.2I2. 

The ISDN numbering plan for MSs and the allocation of mobile station roaming numbers is that defined in CCITT 
Recommendation E.213. Only one of the principles for allocating ISDN numbers is proposed for GSM PLMNs. Only 
the method for allocating MS roaming numbers contained in the main text of CCITT Recommendation E.213 is 
recommended for use in GSM PLMNs. If there is any difference between this Technical Specification and the CCITT 
Recommendations, the former shall prevail. 

For terminology, see also CCITT Recommendations E.164 and X.121. 



1 .4 Conventions on bitordering 



The following conventions hold for the coding of the different identities appearing in this Technical Specification and in 
other GSM Technical Specifications if not indicated otherwise: 

the different parts of an identity are shown in the figures in order of significance; 

the most significant part of an identity is on the left part of the figure and the least significant on the right. 

When an identity appears in other Technical Specifications, the following conventions hold if not indicated otherwise: 

digits are numbered by order of significance, with digit 1 being the most significant; 

bits are numbered by order of significance, with the lowest bit number corresponding to the least significant bit. 



2 Identification of mobile subscribers 

2.1 General 

A unique International Mobile Subscriber Identity (IMSI) shall be allocated to each mobile subscriber in the GSM 
system. 

NOTE: This IMSI is the concept referred to by CCITT as "International Mobile Station Identity". 
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In order to support the subscriber identity confidentiality service the VLRs and SGSNs may allocate Temporary Mobile 
Subscriber Identities (TMSI) to visiting mobile subscribers. The VLR and SGSNs must be capable of correlating an 
allocated TMSI with the IMSI of the MS to which it is allocated. 

An MS may be allocated two TMSIs, one for services provided through the MSC, and the other for services provided 
through the SGSN (P-TMSI for short). 

For addressing on resources used for GPRS, a Temporary Logical Link Identity (TLLI) is used. The TLLI to use is built 
by the MS either on the basis of the P-TMSI (local or foreign TLLI), or directly (random TLLI). 

In order to speed up the search for subscriber data in the VLR a supplementary Local Mobile Station Identity (LMSI) is 
defined. 

The LMSI may be allocated by the VLR at location updating and is sent to the HLR together with the IMSI. The HLR 
makes no use of it but includes it together with the IMSI in all messages sent to the VLR concerning that MS. 

2.2 Composition of IIVISI 

IMSI is composed as shown in figure I . 

Not more than 15 digits 
3 digits 2 or 3 digits 

K ^ K ^ 



MCC MNC 



MSIN 



NMSI 

K ^ 

IMSI 

K ^ 



Figure 1 : Structure of IMSI 



IMSI is composed of three parts: 



i) Mobile Country Code (MCC) consisting of three digits. The MCC identifies uniquely the country of domicile of 
the mobile subscriber; 

ii) Mobile Network Code (MNC) consisting of two or three digits for GSM applications. The MNC identifies the 
home GSM PLMN of the mobile subscriber. The length of the MNC (two or three digits) depends on the value of 
the MCC. A mixture of two and three digit MNC codes within a single MCC area is not recommended and is 
outside the scope of this specification. 

iii) Mobile Subscriber Identification Number (MSIN), identifying the mobile subscriber within a GSM PLMN. 

The National Mobile Subscriber Identity (NMSI) consists of the Mobile Network Code and the Mobile Subscriber 
Identification Number. 

2.3 Allocation principles 

IMSI shall consist of numerical characters (0 through 9) only. 

The overall number of digits in IMSI shall not exceed 15 digits. 

The allocation of Mobile Country Codes (MCCs) is administered by the CCITT and is given in annex A to CCITT Blue 
Book Recommendation E.212. 

The allocation of National Mobile Subscriber Identity (NMSI) is the responsibility of each administration. 

If more than one GSM PLMN exist in a country, a unique Mobile Network Code should be assigned to each of them. 
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The allocation of IMSIs should be such that not more than the digits MCC + MNC of the IMSI have to be analysed in a 
foreign GSM PLMN for information transfer. 

2.4 Structure of TMS I 

Since the TMSI has only local significance (i.e. within a VLR and the area controlled by a VLR, or within an SGSN and 
the area controlled by an SGSN), the structure and coding of it can be chosen by agreement between operator and 
manufacturer in order to meet local needs. 

The TMSI consists of 4 octets. It can be coded using a full hexadecimal representation. 

In order to avoid double allocation of TMSIs after a restart of an allocating node, some part of the TMSI may be related 
to the time when it was allocated or contain a bit field which is changed when the allocating node has recovered from 
the restart. 

In areas where both MSC-based services and SGSN-based services are provided, some discrimination is needed 
between the allocation of TMSIs for MSC-based services and the allocation of TMSIs for SGSN-based services. The 
discrimination shall be done on the 2 most significant bits, with values 00, 01, and 10 being used by the VLR, and 1 1 
being used by the SGSN. 

The TMSI shall only be allocated in ciphered form. See also GSM 03.20. 

The network shall not allocate a TMSI with all 32 bits equal to 1 (this is because the TMSI must be stored in the SIM, 
and the SIM uses 4 octets with all bits equal to 1 for indicating that no valid TMSI is available. 

To allow for eventual modifications of the management of the TMSI code space management, MSs shall not check if an 
allocated TMSI belongs to the range allocated to the allocating node. MSs shall use an allocated TMSI according to the 
specifications, whatever its value. 

2.5 Structure of LMSI 

The LMSI consists of 4 octets and may be allocated by the VLR. 

2.6 Structure of TLLI 

A TLLI is built by the MS or by the SGSN either on the basis of the P-TMSI (local or foreign TLLI), or directly 
(random or auxiliary TLLI), according to the following rules. 

The TLLI consists of 32 bits, numbered from to 31 by order of significance, with bit being the LSB. 

A local TLLI is built by an MS that has a vahd P-TMSI as follows: 

bits 31 down to 30 are set to 1; and 

bits 29 down to are set equal to bits 29 to of the P-TMSI. 
A foreign TLLI is built by an MS that has a valid P-TMSI as follows: 

bit 3 1 is set to 1 and bit 30 is set to 0; and 

bits 29 down to are set equal to bits 29 to of the P-TMSI. 
An MS builds a random TLLI as follows: 

bit 31 is set to 0; 

bits 30 down to 27 are set to 1; and 

bits to 26 are chosen randomly. 
An auxiliary TLLI is built by the SGSN as follows: 

bit 31 is set to 0; 
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bits 30 down to 28 are set to 1; 

bit 27 is set to 0; and 

bits to 26 can be assigned independently. 
Other types of TLLI may be introduced in the future. 
The structure of the TLLI is then summarised by the following table: 

Table A: TLLI structure 



31 


30 


29 


28 


27 


26 too 


Type of TLLI 


1 


1 


T 


T 


T 


T 


Local TLLI 


1 





T 


T 


T 


T 


Foreign TLLI 





1 


1 


1 


1 


R 


Random TLLI 





1 


1 


1 





A 


Auxiliary TLLI 





1 


1 





X 


X 


Reserved 





1 





X 


X 


X 


Reserved 








X 


X 


X 


X 


Reserved 



'T', 'R', 'A' and 'X' indicate bits which can take any value for the type of TLLI. More precisely, 'T' indicates bits 
derived from a P-TMSI, 'R' indicates bits chosen randomly, 'A' indicates bits chosen by the SGSN and 'X' bits in 
reserved ranges. 



3.1 



Numbering plan for mobile stations 



General 



Below the structure of the numbers used by a subscriber of a fixed (or mobile) network for calling a mobile station of a 
GSM PLMN is defined. The network addresses used for packet data communication between a mobile station and a 
fixed (or mobile) station are also defined below. 

Also the structure of mobile station roaming numbers is defined. 

One or more numbers of the ISDN numbering plan shall be assigned to a mobile station to be used for all calls to that 
station, i.e. the assignment of an MSISDN to a mobile station is mandatory. 

NOTE: For card operated stations the ISDN number should be assigned to the holder of the card (personal 
number). 



3.2 Numbering plan requirements 



In principle, it should be possible for any subscriber of the ISDN or PSTN to call any MS in a GSM PLMN. This 
implies that ISDN numbers for MSs should comply with the ISDN numbering plan in each country. 

The ISDN numbers of MSs should be composed in such a way that standard ISDN/PSTN charging can be used for calls 
to MSs. 

It should be possible for each administration to develop its own independent numbering/addressing plan for MSs. 

The numbering/addressing plan should not limit the possibility for MSs to roam among GSM PLMNs. 

It should be possible to change the IMSI without changing the ISDN number allocated to an MS and vice versa. 

In principle, it should be possible for any subscriber of the CSPDN/PSPDN to call any MS in a GSM PLMN. This 
implies that it may be necessary for an MS to have a X.121 number. 

In principle, it should be possible for any fixed or mobile terminal to communicate with a mobile terminal using an IP 
v4 address. 
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3.3 Structure of MS international PSTN/ISDN number 
(IVISISDN) 

The MS international ISDN numbers are allocated from the CCITT Recommendation E. 164 numbering plan, see also 
CCITT Recommendation E.213. The MS international ISDN number will then be as shown in figure 2. 



CC 



NDC SN 



National (significant) 
mobile number 
Mobile station international 
ISDN number 



Figure 2: Number Structure of MSISDN 

The number consists of: 

Country Code (CC) of the Country in which the MS is registered, followed by 

National (significant) mobile number which consists of National Destination Code (NDC) and Subscriber 

Number (SN). 

For GSM applications, a National Destination Code is allocated to each GSM PLMN. In some countries more than one 
NDC may be required for each GSM PLMN. 

The composition of the MS international ISDN number should be such that it can be used as a global title address in the 
Signalling Connection Control Part (SCCP) for routing messages to the home location register of the MS. The country 
code (CC) and the national destination code (NDC) will provide such routing information. If further routing information 
is required, it should be contained in the first few digits of the subscriber number (SN). 

A sub-address may be appended to an ISDN number for use in call set-up and in supplementary service operations 
where an ISDN number is required (see CCITT Recommendations E.164, section 11. 2 and X.213 annex A). The sub- 
address is transferred to the terminal equipment denoted by the ISDN number. 

The maximum length of a sub-address is 20 octets, including one octet to identify the coding scheme for the sub- 
address (see CCITT Recommendation X.213, annex A). All coding schemes described in CCITT Recommendation 
X.213, annex A, are supported in GSM. 

3.4 IVIobile Station Roaming Number (IVISRN) for PSTN/ISDN 
routeing 

The Mobile Station Roaming Number (MSRN) is used to route calls directed to an MS. On request from the Gateway 
MSC via the HLR, the MSRN is temporarily allocated to an MS by the VLR with which the MS is registered; it 
addresses the Visited MSC, co-located with the assigning VLR. More than one MSRN may be assigned simultaneously 
to an MS. 

The MSRN is passed by the HLR to the Gateway MSC for routing calls to the MS. 

The Mobile Station Roaming Number for PSTN/ISDN routing shall have the same structure as international ISDN 
numbers in the area in which the roaming number is allocated, i.e.: 

the Country Code of the country in which the visitor location register is located; 

the National Destination Code of the visitor GSM PLMN or numbering area; 

a Subscriber Number with the appropriate structure for that numbering area. 
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The MSRN must not be used for subscriber dialling. It should be noted that the MSRN can be identical to the MSISDN 
(section 3.3) in certain circumstances. In order to discriminate between subscriber generated access to these numbers 
and re-routing performed by the network, re-routing or re-direction indicators or other signalling means should be used, 
if available (see GSM 09.03). 

3.5 Structure of Mobile Station International Data Number 

The structure of MS international data numbers should comply with the data numbering plan of CCITT 
Recommendation X.121 as applied in the home country of the mobile subscriber. Implications on numbering 
interworking functions that may need to be provided by the PLMN (if the use of X.121 numbers is required) are 
indicated in GSM 03.70. 

3.6 Handover Number 

The handover number is used for establishment of a circuit between MSCs to be used for a call being handed over. The 
handover number may be reused in the same way as the MSRN. 

3.7 Structure of an IP v4 address 

One or more IP address domains could be allocated to each PLMN. The IP v4 address structure is defined in RFC 791. 

An IP v4 address may be allocated to an MS either permanently or on a temporary basis during a connection with the 
network. 

3.8 Structure of an IP v6 address 

One or more IP address domains could be allocated to each PLMN. The IP v6 address structure is defined in RFC 1883. 

An IP v6 address may be allocated to an MS either permanently or on a temporary basis during a connection with the 
network 

4 Identification of location areas and base stations 

4.1 Composition of the Location Area Identification (LAI) 

The Location Area Identification shall be composed as shown in figure 3: 



MCC 



MNC 



LAC 



Location Area Identification- 



Figure 3: Structure of Location Area Identification 

The LAI is composed of the following elements: 

- Mobile Country Code (MCC) identifies the country in which the GSM PLMN is located. The value of the MCC 
is the same as the three digits MCC contained in international mobile subscriber identity (IMSI); 

- Mobile Network Code (MNC) is a code identifying the GSM PLMN in that country. The MNC takes the same 
value as the two or three digit MNC contained in IMSI; 

Location Area Code (LAC) which is a fixed length code (of 2 octets) identifying a location area within a GSM 
PLMN. This part of the location area identification can be coded using a full hexadecimal representation except for 
the following reserved hexadecimal values: 
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0000, and 

FFFE 

These reserved values are used in some special cases when no valid LAI exists in the MS (see GSM 04.08 and 
GSM 11.11). 

A specific GSM PLMN code (MCC + MNC) may be broadcast for non SoLSA compatible mobile stations that do not 
understand the exclusive access indicator (see GSM 03.73). The reserved value of the escape PLMN code is MCC = 
901 and MNC = 08. 

4.2 Composition of the Routing Area Identification (RAI) 

The Routing Area Identification shall be composed as shown in figure 4: 



+ + + + 

I LAI I I RAC I 

+ + + + 

<-Routing Area Identif ication-> 



Figure 4: Structure of Routing Area Identification 

The RAI is composed of the following elements: 

A valid Location Area Identity (LAI) as defined in section 4. 1 . Invalid LAI values are used in some special cases 
when no vaHd RAI exists in the mobile station (see GSM 04.08 and GSM 11.11). 

Routing Area Code (RAC) which is a fixed length code (of 1 octets) identifying a routing area within a location 
area. 

4.3 Base station identification 

4.3.1 Cell Identity (CI) and Cell Global Identification (CGI) 

The BSS and cell within the BSS is identified within a location or routing area by adding a Cell Identity (CI) to the 
location or routing area identification, as shown in figure 5. The CI is of fixed length with 2 octets and it can be coded 
using a full hexadecimal representation. 

The Cell Global Identification is the concatenation of the Location Area Identification and the Cell Identity. Cell 
Identity must be unique within a location area. 



MCC 



MNC 



LAC CI 



Location Area Identification 

K ^ 

Cell Global Identification (CGI) 

K ^ 



Figure 5: Structure of Cell Global Identification 

4.3.2 Base Station Identify Code (BSIC) 

The base station identity code is a local colour code that allows an MS to distinguish between different neighbouring 
base stations. BSIC is a 6-bit length code that is structured in the following way. 
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NCC 



BCC 



3 bits 3 bits 



PLIVIN colour code BS colour code 

Figure 6: Structure of BSIC 

In the definition of the NCC, care needs to be taken to ensure that the same NCC is not used in adjacent PLMNs that 
may use the same BCCH carrier frequencies in neighbouring areas. Therefore, to prevent potential deadlocks, a 
definition of the NCC appears in annex A. This annex will be reviewed in a co-ordinated manner when a PLMN is 
created. 

4.4 Regional Subscription Zone Identity (RSZI) 

A PLMN specific regional subscription defines unambiguously for the entire PLMN the regions in which roaming is 
allowed. It consists of one or more regional subscription zones. The regional subscription zone is identified by Regional 
Subscription Zone Identity (RSZI). A regional subscription zone identity is composed as shown in figure 7. 





^ 




RSZI -^ 




















cc 


NDC 






ZC 














^ ^ 

Zone Code, Two octets 





Figure 7: Structure of Regional Subscription Zone Identity (RSZI) 

The elements of the regional subscription zone identity are: 

the Country Code (CC) which identifies the country in which the GSM PLMN is located; 

- the National Destination Code (NDC) which identifies the GSM PLMN in that country; 

the Zone Code (ZC) which identifies a regional subscription zone as a pattern of allowed and not allowed 
location areas uniquely within that PLMN. 

CC and NDC are those of a CCITT E.164 VLR or SGSN number (see section 5.1) of the PLMN and are coded with a 
tailing filler, if required. ZC has fixed length of two octets and is coded in full hexadecimal representation. 

The VPLMN operator assigns RSZIs including the zone codes. The zone code is evaluated in the VLR or SGSN by 
information stored in the VLR or SGSN as a result of administrative action. If a zone code is received by a VLR or 
SGSN during updating by the HLR and this zone code is related to that VLR or SGSN, the VLR or SGSN shall be able 
to decide for all its MSC or SGSN areas and all its location areas whether they are allowed or not allowed. 

For details of assignment of RSZI and of ZC as subscriber data see GSM 03.08. 

For selection of RSZI at location updating by comparison with the leading digits of the VLR or SGSN number and for 
transfer of ZC fi-om the HLR to VLR and SGSN see GSM 09.02. 

4.5 Location Number 

A location number is a number that defines a specific location within a GSM PLMN. The Location number is formatted 
according to CCITT Recommendation E.164, as shown in figure 8. The country code (CC) and national destination 
code (NDC) fields of the location number are those which define the GSM PLMN of which the location is part. 
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cc 




NDC 




LSP 



















Figure 8: Location Number Structure 

The structure of the locally significant part (LSP) of the location number is a matter for agreement between the PLMN 
operator and the national numbering authority in the PLMN's country. It is desirable that the location number can be 
interpreted without the need for detailed knowledge of the internal structure of the PLMN. The LSP should therefore 
include the National Destination Code in the national numbering plan for the fixed network, which defines the 
geographic area in which the location lies. 

The set of location numbers for a GSM PLMN must be chosen so that a location number can be distinguished from the 
MSISDN of a subscriber of the PLMN. This will allow the PLMN to trap attempts by users to dial a location number. 



5 Identification of IVISCs and location registers 

5.1 Identification for routing purpose 

International PSTN/ISDN numbers and/or Signalling Point Codes "entity number", i.e., "HLR number", "VLR 
number", "MSC number", "SGSN number" and "GGSN number" identify MSCs, GSNs and location registers in each 
GSM PLMN. 

Additionally SGSN, GGSN ai-e identified by GSN Addresses. These are the SGSN Address and the GGSN Address. 

A GSN Address shall be composed as shown in figure 9. 



<- 



GSN Address 



-> 



Address Type 



Address Length 



Address 



<- 



2 bits 



> <- 



6 bits 



> ^ 



4 to 16_octets 



-> 



Figure 9: Structure of GSN Address 

The GSN Address is composed of the following elements: 

The Address Type which is a fixed length code (of 2 bits) identifying the type of address that is used in the 
Address field. 

Address Length which is a fixed length code (of 6 bits) identifying the length of the Address field. 

Address is a variable length field with either an IPv4 address or an IPv6 address. 
Address Type and Address Length 4 are used when Address is an IPv4 address. 
Address Type 1 and Address Length 16 are used when Address is an IPv6 address. 
The IP v4 address structure is defined in RFC 79 L 
The IP v6 address structure is defined in RFC 1883. 
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5.2 Identification of HLR for HLR restoration application 

HLR may also be identified by one or several "HLR id(s)", consisting of the leading digits of the IMSI (MCC + MNC + 
leading digits of MSIN). 



6 International Mobile Station Equipment Identity and 

Software Version Number 

6.1 General 

Below the structure and allocation principles of the International Mobile station Equipment Identity and Software 
Version Number (IMEISV) and the International Mobile station Equipment Identity (IMEI) are defined. 

The IMEI or the IMEISV uniquely defines the Mobile Station Equipment. 

6.2 Composition of IMEI and IMEISV 
6.2.1 Composition of IMEI 

The International Mobile station Equipment Identity (IMEI) is composed as shown in figure 10. 



8 digits 6 digits 1 digit 
< > < > < > 



TAG 



SNR 



spare 



IIVIEI 15 digits 
< > 



Figure 10: Structure of IMEI 

The IMEI is composed of the following elements (each element shall consist of decimal digits only): 

- Type Allocation Code (TAC). Its length is of 8 digits; 

Serial Number (SNR) is an individual serial number uniquely identifying each equipment within each TAC. Its 
length is 6 digits. 

Spare digit: this digit shall be zero, when transmitted by the MS. 

The security requirements of the IMEI are defined in TS GSM 02.16. 



6.2.2 Composition of IMEISV 



The International Mobile station Equipment Identity and Software Version Number (IMEISV) is composed as shown in 
figure 11. 
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8 digits 6 digits 2 digits 
< > < > < > 



TAG 



SNR 



SVN 



IIVIEI 16 digits 
< > 



Figure 1 1 : Structure of IMEISV 

The IMEISV is composed of the following elements (each element shall consist of decimal digits only): 

- Type Allocation Code (TAC). Its length is of 8 digits; 

Serial Number (SNR) is an individual serial number uniquely identifying each equipment within each TAC. Its 
length is 6 digits. 

Software Version Number (SVN) identifies the software version number of the mobile equipment. Its length is 2 
digits. 

Regarding updates of the IMEISV: the security requirements of TS GSM 02.16 apply only to the TAC and SNR, but 
not to the SVN part of the IMEISV. 

6.3 Allocation principles 

A central body issues the Type Allocation Code (TAC). 

Manufacturers shall allocate individual serial numbers (SNR) in a sequential order. 

For a given ME, the combination of TAC and SNR used in the IMEI shall duplicate the combination of TAC and SNR 
used in the IMEISV. 

The manufacturer allocates the Software Version Number. SVN value 99 is reserved for future use. 



Identification of Voice Group Call and Voice 
Broadcast Call Entities 



7.1 Group Identities 



Logical groups of subscribers to the Voice Group Call Service or to the Voice Broadcast Service are known by a Group 
Identity (Group ID). Group IDs for VGCS are unique within a PLMN. Likewise, Group IDs for VBS are unique within 
a PLMN. However, no uniqueness is required between the sets of Group IDs. These sets may be intersecting or even 
identical, at the option of the network operator. 

The Group ID shall be a binary number with a maximum value depending on the composition of the voice group call 
reference or voice broadcast call reference defined in section 7.3. 

VGCS or VBS shall also be provided in case of roaming. If this applies, certain Group IDs shall be defined as supra- 
PLMN Group IDs that have to be co-ordinated between the network operators and which shall be known in the 
networks and in the SIM. 

The format of the Group ID is identical for VBS and VGCS. 
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7.2 Group Call Area Identification 



Groupings of cells into specific group call areas occur in support of both the Voice Group Call Service and the Voice 
Broadcast Service. These service areas are known by a "Group Call Area Identity" (Group Call Area Id). No restrictions 
are placed on what cells may be grouped into a given group call area. 

The Group Call Area ID shall be a binary number uniquely assigned to a group call area in one network and with a 
maximum value depending on the composition of the voice group call reference or voice broadcast reference defined 
under 7.3. 

The formats of the Group Call Area ID for VGCS and the Group Call Area ID for VBS are identical. 

7.3 Voice Group Call and Voice Broadcast Call References 

Specific instances of voice group calls (VGCS) and voice broadcast calls (VBS) within a given group call area are 
known by a "Voice Group Call Reference" or by a "Voice Broadcast Call Reference". 

Each voice group call or voice broadcast call in one network is uniquely identified by its Voice Group Call Reference or 
Voice Broadcast Call Reference. The Voice Group Call Reference or Voice Broadcast Call Reference is composed of 
the group ID and the group call area ID. In the case where the routing of dispatcher originated calls is performed 
without the HLR (see GSM 03.68 for VGCS and GSM 03.69 for VBS), the Voice Group Call Reference or Voice 
Broadcast Call Reference shall have a maximum length of 4 octets. The composition of the group call area ID and the 
group ID can be specific for each network operator. 

The format is given in figure 12. 



Group 
Call 
Area ID 



Group ID 



Voice Group Call Reference / 
Voice Broadcast Call Reference 

^ ^ 



Figure 12: Voice Group Call Reference / Voice Broadcast Call Reference 



8 SCCP subsystem numbers 



Subsystem numbers are used to identify applications within network entities that use SCCP signalling. In GSM, 
subsystem numbers may be used between PLMNs. In this case they are taken from the globally standardised range (1 - 
31) or the part of the national network range (129 - 150) reserved for GSM use between PLMNs, or within a PLMN, in 
which case they are taken from the part of the national network range (32 - 128 & 15 1 - 254) not reserved for GSM use 
between PLMNs. 

8.1 Globally standardised subsystem numbers used for GSM 

The following globally standardised subsystem numbers have been allocated for use by GSM: 
OOOOOllOHLR(MAP); 
OOOOOlllVLR(MAP); 
0000 lOOOMSC (MAP); 
0000 lOOlEIR (MAP); 
0000 lOlOis allocated for evolution (possible Authentication centre). 
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8.2 National network subsystem numbers used for GSM 

The following national network subsystem numbers have been allocated for use within GSM networks: 

nil lOlOBSC (BSSAP-LE) 

nil lOllMSC (BSSAP-LE) 

11111 lOOSMLC (BSSAP-LE) 

11111 lOlBSS O&M (A interface); 

111111 lOBSSAP (A interface). 
The following national network subsystem numbers have been allocated for use within and between GSM networks: 

1001 OOOIGMLC(MAP); 

1001 OOIOCAP; 

1001 OOllgsmSCF(MAP); 

1001 OIOOSIWF(MAP); 
1001 OIOISGSN(MAP); 
1001 OllOGGSN(MAP). 

9 Definition of Access Point Name 

In the GPRS backbone, an Access Point Name (APN) is a reference to a GGSN. To support inter-PLMN roaming, the 
internal GPRS DNS functionality is used to translate the APN into the IP address of the GGSN. 

9.1 Structure of APN 

The APN is composed of two parts as follows: 

• The APN Network Identifier which defines to which external network the GGSN is connected to. This part of 

the APN is mandatory. 

• The APN Operator Identifier that defines in which PLMN GPRS backbone the GGSN is located. This part of the 

APN is optional. 

The APN Operator Identifier is placed after the APN Network Identifier. An APN consisting of both the Network 
Identifier and Operator Identifier corresponds to a DNS name of a GGSN and has a maximum length of 100 octets. 

The syntax of the APN shall follow the Name Syntax defined in RFC 2181 [14] and RFC 1035 [15]. The APN consists 
of one or more labels. Each label is coded as one octet length field followed by that number of octets coded as 8 bit 
ASCII characters. Following RFC 1035 [15] the labels should consist only of the alphabetic characters (A-Z and a-z), 
digits (0-9) and the dash (-). The case of alphabetic characters is not significant. The APN is not terminated by a length 
byte of zero. 

NOTE: A length byte of zero is added by the SGSN at the end of the APN before interrogating a DNS server. 

For the purpose of presentation, an APN is usually displayed as a string in which the labels are separated by dots (e.g. 
"Label l.Label2.Label3"). 
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9.1 .1 Format of APN Network Identifier 

The APN Network Identifier shall contain at least one label and shall have a maximum length of 63 octets. An APN 
Network Identifier shall not start with the strings "rac", "lac" or "sgsn" and it shall not end in ".gprs". It shall also not 
take the value "*". 

In order to guarantee uniqueness of APN Network Identifier within the GPRS PLMN(s), an APN Network Identifier 
containing more than one label corresponds to an Internet domain name. This name should only be allocated by the 
PLMN to an organisation that has officially reserved this name in the Internet domain. Other types of APN Network 
Identifiers are not guaranteed to be unique within the GPRS PLMN(s). 

9.1 .2 Format of APN Operator Identifier 

The APN Operator Identifier is composed of three labels. The last label shall be "gprs". The first and second labels 
together shall uniquely identify the GPRS PLMN (e.g. "<operator-name>.<operator-group>.gprs"). 

For each operator, there is a default APN Operator Identifier (i.e. domain name). This default APN Operator Identifier 
is derived from the IMSI as follows: 

"mnc<MNC> . mcc<MCC>. gprs" 

where: 

"mnc" and "mcc" serve as invariable identifiers for the following digits. 

<MNC> and <MCC> are derived from the components of the IMSI defined in section 2.2. 

This default APN Operator Identifier is used in inter-PLMN roaming situations when attempting to translate an APN 
consisting of Network Identifier only into the IP address of the GGSN residing in the HPLMN. The PLMN may provide 
DNS translations for other, more human-readable, APN Operator Identifiers in addition to the default Operator 
Identifier described above. 

In order to guarantee inter-PLMN DNS translation possibility, the <MNC> and <MCC> coding to be used in the 
"mnc<MNC>.mcc<MCC>.gprs" format of the APN OI shall be: 

• <MNC> = 3 digits 

• <MCC> = 3 digits 

• If there are less than 3 significant digits in MNC, one or more "0" digit(s) is/are inserted at the left side to fill the 

3 digits coding of MNC in the APN 01. 

As an example, the APN OI for MCC 345 and MNC 12 shall be coded in the DNS as mnc012.mcc345.gprs. 

9.2 Definition of the Wild Card APN 

The APN field in the HLR may contain a wild card APN if the HPLMN operator allows the subscriber to access any 
network of a given PDP Type. If an SGSN has received such a wild card APN, it may either choose the APN Network 
Identifier received from the Mobile Station or a default APN Network Identifier for addressing the GGSN when 
activating a PDP context. 



9.2.1 Coding of the Wild Card APN 



The wild card APN is coded as an APN with "*" as its single label, (i.e. a length octet with value one, followed by the 
ASCII code for the asterisks). 
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1 Identification of the Cordless Telephony System 
entities 

1 0.1 General description of CTS-MS and CTS-FP Identities 

Every CTS-FP broadcasts a local identity - the Fixed Part Beacon Identity (FPBI) - which contains an Access Rights 
Identity. Every CTS-MS has both an Access Rights Key and a CTS Mobile Subscriber Identity (CTSMSI). These 
operate as a pair. A CTS-MS is allowed to access any CTS-FP that broadcasts a FPBI that can be identified by any of 
the CTS-MS Access Rights Keys of that CTS-MS. The CTS-MS Access Rights Key contains the FPBI and the FPBI 
Length Indicator (FLI) indicating the relevant part of the FPBI used for controlling access. 

1 0.2 CTS Mobile Subscriber Identities 

10.2.1 General 

Each CTS-MS has one or more temporary identities that are used for paging and access requesting. Below the structure 
and allocation principles of the CTS Mobile Subscriber Identities (CTSMSI) are defined. 

1 0.2.2 Composition of tine CTSMSI 

bit No 22 1 

+ + 

+ _J I I I I I I I I I I I I I I I I I I I L_ + 

Type I < Significant Part > | 

CTSMSI 22 bits 
< > 

Figure 13: Structure of CTSMSI 

The CTSMSI is composed of the following elements: 
- CTSMSI Type. Its length is 2 bits; 
Significant Part. Its length is 20 bits. 
The following CTSMSI Type value have been allocated for use by CTS: 

00 Default Individual CTSMSI; 

01 Reserved; 

10 Assigned Individual CTSMSI; 

1 1 Assigned Connectionless Group CTSMSI. 

10.2.3 Allocation principles 

Default Individual CTSMSI contains the least significant portion of the IMSI. This is the default CTS-MS identity. 

Assigned CTSMSIs are allocated by the CTS-FP during enrolment, registration and other access procedures. Significant 
Part of the assigned CTSMSI shall be allocated in the range 00001-FFFFE. CTS-FP shall not allocate Significant Part 
equal to 00000 or to FFFFF and shall not allocate Assigned CTSMSI using Reserved Type value. Such assignments 
shall be ignored by the CTS-MS. 

Assigned CTSMSIs are allocated in ciphered mode. 

NOTE: The assigned individual CTSMSI should be updated whenever sent in clear text on the CTS radio 
interface during RR connection establishment. 
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The value FFFFF from the set of Assigned Connectionless Group CTSMSI shall be considered in all CTS-MS as the 
value of the Connectionless Broadcast Identifier. 

10.2.4 CTSMSI hexadecimal representation 

The 22 bits of CTSMSI are padded with 2 leading zeroes for having a 6 digits hexadecimal value. 
EXAMPLE: binary CTSMSI value: 1 1 1001 0010 0000 101 1 1 100 

hexadecimal CTSMSI value: 39 20 BC 

10.3 Fixed Part Beacon Identity 

10.3.1 General 

Each CTS-FP has one Fixed Part Beacon Identity known by the enrolled CTS-MSs. The FPBI is periodically broadcast 
on the BCH logical channel so that the CTS-MSs are able to recognise the identity of the CTS-FP. The FPBI contains 
an Access Rights Identity. 

Enrolled CTS-MSs shall store the FPBI to which their assigned CTSMSIs are related. 

Below the structure and allocation principles of the Fixed Part Beacon Identity (FPBI) are defined. 

1 0.3.2 Composition of the FPBI 
10.3.2.1 FPBI general structure 

bit No 19 1 



+ _J I I I I I I I I I I I I I I I I L_ + 

Type] Significant Part | 

FPBI 19 bits 
< > 

Figure 14: General structure of FPBI 



The FPBI is composed of the following elements: 

- FPBI Type. Its length is 2 bits; 

FPBI Significant Part. Its length is 17 bits. 

NOTE: The three LSBs bits of the FPBI form the 3-bit training sequence code (TSC). See GSM 05.56. 
The following FPBI Type value have been allocated for use by CTS: 

00 FPBI class A: residential and single-cell systems; 

01 FPBI class B: multi-cell PABXs; 

all other values are reserved and CTS-MSs shall treat these values as FPBI class A. 

10.3.2.2 FPBI class A 

The use of this class is intended for small residential and private (PBX) single cell CTS-FP. 
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bit No 19 1 



10 01 I 

+ _J I I I I I I I I I I I I I I I I L_ + 

Type I FPN I 

FPBI 19 bits 
< > 

Figure 15: Structure of FPBI class A 



The FPBI class A is composed of the following elements: 

FPBI Class A Type. Its length is 2 bits and its value is 00; 

Fixed Part Number (FPN). Its length is 17 bits. The FPN contains the least significant bits of the Serial Number 
part of the IFPEI.NOTE: The FPBI Length Indicator should be set to 19 for class A FPBI. 

10.3.2.3 FPBI class B 

This class is reserved for more complex private installation such as multi-cell PABXs. 

bit No 19 1 



10 II I 

+ _J I I I I I I I I I I I I I I I I L_ + 

Type I CNN + FPN + RPN | 

FPBI 19 bits 
< > 

Figure 16: Structure of FPBI class B 

The FPBI class B is composed of the following elements: 

FPBI Class B Type. Its length is 2 bits and its value is 01; 

CTS Network Number (CNN). The manufacturer or the system installer defines its length; 

Fixed Part Number (FPN). The manufacturer or the system installer defines its length; 

Radio Part Number (RPN) assigned by the CTS manufacturer or system installer. The manufacturer or the 
system installer defines its length. 

NOTE 1 : RPN is used to separate a maximum of 2'*'"'^ '''"'^* different cells from each other. This define a cluster of 
cells supporting intercell handover. RPN length is submitted to a CTS-MS as a result of a successful 
attachment. 

NOTE 2: The FPBI Length Indicator should be set to (2 + CNN Length) for class B FPBI. 

10.3.3 Allocation principles 

The FPBI shall be allocated during the CTS-FP initialisation procedure. Any change to the value of the FPBI of a given 
CTS-FP shall be considered as a CTS-FP re-initialisation; i.e. each enrolled CTS-MS needs to be enrolled again. 

FPBI are not requested to be unique (i.e. several CTS-FP can have the same FPBI in different areas). Care should be 
taken for limiting CTS-MS registration attempts to a homonymous fixed part. 

10.4 International Fixed Part Equipment Identity 
10.4.1 General 

Below the structure and allocation principles of the International Fixed Part Equipment Identity (IFPEI) are defined. 



£75/ 



3GPP TS 03.03 version 7.7.0 Release 1 998 24 ETSI TS 1 00 927 V7.7.0 (2002-06) 



1 0.4.2 Composition of tine IFPEI 

6 digits 2d 6 digits 2d 
< >< >< >< > 

+ ++ ++ ++ + 

I I I I I III 

+ -J— J— J— L-L- + + --L- + + --L-L-L-L-L- + + --L- + 

TAC FAC SNR SVN 

IFPEI 16 digits 
< > 

Figure 17: Structure of IFPEI 

The IFPEI is composed of the following elements (each element shall consist of decimal digits only): 

Type Approval Code (TAC). Its length is of 6 decimal digits; 

Final Assembly Code (FAC). Its length is of 2 decimal digits; 

Serial NumbeR (SNR). Its length is of 6 decimal digits; 

Software Version Number (SVN) identifies the software version number of the fixed part equipment. Its length 
is of 2 digits. 

Regarding updates of the IFPEI: the TAC, FAC and SNR shall be physically protected against unauthorised change (see 
GSM 02.09); i.e. only the SVN part of the IFPEI can be modified. 

10.4.3 Allocation principles 

A central body issues the Type Approval Code (TAC). 

The manufacturer encodes the place of final assembly (FAC). 

Manufacturers shall allocate unique serial numbers (SNR) in a sequential order. 

The Software Version Number (SVN) is allocated by the manufacturer after authorisation by the type approval 
authority. SVN value 99 is reserved for future use. 

10.5 International Fixed Part Subscription Identity 
10.5.1 General 

Below the structure and allocation principles of the International Fixed Part Subscription Identity (IFPSI) are defined. 



1 0.5.2 Composition of the IFPSI 



No more than 15 digits 
< > 

3d 3d 
< >< >< // > 

+ ++ ++ // + 

I I I I I I 

+_±_±-++_±_±_++_±_±_±//±_±_J._±_+ 

MCC CON FPIN 

NFPSI 



IFPSI 



Figure 18: Structure of IFPSI 

The IFPSI is composed of the following elements (each element shall consist of decimal digits only): 

- Mobile Country Code (MCC) consisting of three digits. The MCC identifies the country of the CTS-FP 

subscriber (e.g. 208 for France); 



£75/ 



3GPP TS 03.03 version 7.7.0 Release 1998 



25 



ETSI TS 100 927 V7.7.0 (2002-06) 



- CTS Operator Number (CON). Its length is of three digits; 

Fixed Part Identification Number (FPIN) identifying the CTS-FP subscriber. 

The National Fixed Part Subscriber Identity (NFPSI) consists of the CTS Operator Number and the Fixed Part 
Identification Number. 

10.5.3 Allocation principles 

IFPSI shall consist of numerical characters (0 through 9) only. 

The allocation of Mobile Country Codes (MCCs) is administered by the CCITT and is given in annex A to CCITT Blue 
Book Recommendation E.212. 

The allocation of CTS Operator Number (CON) and the structure of National Fixed Part Subscriber Identity (NFPSI) 
are the responsibility of each National Regulation Authority. 

CTS Operator shall allocate unique Fixed Part Identification Number. 



11 



Identification of Localised Service Area 



Cells may be grouped into specific localised service areas. These localised service areas are identified by a localised 
service area identity (LSA ID). No restrictions are placed on what cells may be grouped into a given localised service 
area. 

The LSA ID can either be a PLMN significant number or a universal identity. This shall be known both in the networks 
and in the SIM. 

The LSA ID consists of 24 bits, numbered from to 23 by order of significance, with bit being the LSB. Bit 
indicates if the LSA is a PLMN significant number or a universal LSA. If the bit is set to the LSA is a PLMN 
significant number and if it is set to 1 it is a universal LSA. 

The LSA ID shall be composed as shown in figure 19. 




Figure 19: Structure of LSA ID 
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Annex A (informative): 
Colour Codes 

A.1 Utilisation of the BSIC 

To each cell is allocated a BSIC, within 64 values. In each cell its BSIC is broadcast in each burst sent on the SCH, and 
is then known by all MSs that get the synchronisation with this cell. The MS uses the BSIC for several purposes, all 
aiming of avoiding ambiguity or interference that can arise when an MS in a given position can receive two cells using 
the same BCCH frequency. 

Some of the utilisations of the BSIC relate to cases where the MS is attached to one of the cells. Other utilisations relate 
to cases where the MS is attached to third cell, usually somewhere between the two cells in question. 

The first category of utilisations includes: 

The three least significant bits of the BSIC indicate which of the 8 training sequences is used in the bursts sent 
on the downlink common channels of the cell. Different training sequences allow for a better transmission in case of 
interference. The group of the three least significant bits of the BSIC is called the BCC (Base station Colour Code). 

The BSIC is used to modify the bursts sent by the MSs on the access bursts. This aims at avoiding one cell 
decoding correctly access bursts sent to another cell. 

The second category of utilisations includes: 

When in connected mode, the MSs measure and report the level they receive on a number of frequencies, 
corresponding to the BCCH frequencies of neighbouring cells in the same network as the used cell. Along with the 
measurement result, the MS provides the network with the BSIC it has received on the frequency. This enables the 
network to discriminate between several cells happening to use the same BCCH frequency. Bad discrimination 
might result in faulty handovers. 

The content of the measurement report messages is limited to 6 neighbour cells. It is then useful to limit the 
reported cells to those to which handovers are accepted. To this avail, each cell provides a list of the values of the 
three most significant bits of the BSICs that are allocated to the cells that are useful to consider for handovers 
(usually excluding cells in other PLMNs). This information enables the MS to put aside cells with non-conformant 
BSIC and not to report about them. The group of the three most significant bits of the BSIC is called the NCC 
(Network Colour Code). 

It should be noted that when in idle mode, the MS identifies a cell (for cell selection purposes) according to the cell 
identity broadcast on the BCCH and not by the BSIC. 



A.2 Guidance for planning 

From these utilisations, the following planning rule can be derived: 

If there are places where MSs can receive two cells, whether in the same PLMN or in different ones, that use the 
same BCCH frequency, it is highly preferable that these two cells have different BSICs. 

Where the coverage areas of two PLMNs overlap, the rule above is respected if: 

i) The PLMNs uses different sets of BCCH frequencies. This is in particular the case if no frequency is common to 
the two PLMNs. This usually holds for PLMNs in the same country. 

ii) The PLMNS use different sets of NCCs. 

iii) BSIC and BCCH frequency planning is co-ordinated. 
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Recognising that method iii) is more cumbersome than method ii), and that method i) is too constraining, it is suggested 
that overlapping PLMNs using common part of spectrum agree on different NCCs to be used in overlapping area. As an 
example, a preliminary NCC allocation for countries in the European region can be found in section A.3 of this annex. 

This example can be used as basis for bilateral agreements. However, the usage of the NCCs allocated in section A.3 is 
not compulsory. PLMN operators can agree on different BSIC allocation rules in border areas. The usage of BSICs is 
not constrained in non-overlapping areas, or if ambiguities are resolved by using different sets of BCCH frequencies. 



A.3 Example of PLMN Colour Codes (NCCs) for the 
European region 



Austria 

Belgium 

Cyprus 

Denmark 

Finland 

France 

Germany 

Greece 

Iceland 

Ireland 

Italy 

Liechtenstein 

Luxembourg 

Malta 

Monaco 

Netherlands 

Norway 

Portugal 

San Marino 

Spain 

Sweden 

Switzerland 

Turkey 

UK 

Vatican 

Yugoslavia 




1 

3 
1 



3 



3 

2 

2 

2 

1 

3 (possibly 0(=France)) 



3 

3 

(possibly 2(= Italy)) 
1 

2 
1 
2 
2 

1 (possibly 2(=Italy)) 
3 



This allows for each country a second operator by allocating the colour codes n (in the table) and n + 4. More than 2 
colour codes per country may be used provided that in border areas only the values n and/or n+4 are used. 
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Annex B (informative): 
Change history 



SMG# 


SPEC 


CR 


PHA 
SE 


VERS 


NEW VER 
S 


SUBJECT 


s25 


03.03 


A004 


R96 


5.0.2 


5.1.0 


Definitions of SCCP subsystem numbers 


s25 


03.03 


A003 


R97 


5.0.2 


6.0.0 


Numbering, addressing, and identification 


s26 


03.03 


A006 


R97 


6.0.0 


6.1.0 


IVIandatory assignment of IVISISDN to an IVIS for GPRS; removal of 
Ipv6 address for GPRS IVlSs. 


s26 


03.03 


A007 


R97 


6.0.0 


6.1.0 


Clarification of TLLI used for anonymous access 


s28 


03.03 


A016 


R97 


6.1.0 


6.2.0 


Correction of the APN wildcard coding 


s28 


03.03 


A015 


R97 


6.1.0 


6.2.0 


Introduction of IPv6 addresses for GPRS MSs (C99-1 17) 


S28 


03.03 


A014 


R97 


6.1.0 


6.2.0 


Alignment of GSM 03.03 with GSM 09.02 


s28 


03.03 


A019 


R98 


6.1.0 


7.0.0 


Numbering, addressing and identification (Harmonisatlon) 


s28 


03.03 


A012 


R98 


6.1.0 


7.0.0 


Addition of SoLSA functionality 


s28 


03.03 


A018 


R98 


6.1.0 


7.0.0 


Addition of Cordless Telephony System Identities 


S29 


03.03 


A020r1 


R98 


7.0.0 


7.1.0 


Correction to the MNC length 


s29 


03.03 


A021 


R98 


7.3.0 


7.3.1 


Definition of escape PLMN code 


S29 


03.03 


A025 


R98 


7.0.0 


7.1.0 


Harmonisatlon of the MNC-length; correction of CR A019r1 


S29 


03.03 


A027r1 


R98 


7.0.0 


7.1.0 


SSN reallocation for CAP, gsmSCF, SIWF, GGSN, SGSN, SMLC 
and GMLC 


S29 


03.03 


A031 


R98 


7.0.0 


7.1.0 


Correction of VGC/VBC reference 


S29 


03.03 


A027r1 


R98 


7.1.0 


7.1.1 


V 7.1 .1 produced because of an incomplete implementation of CR 
A027r1 


CN#05 


03.03 


A032r1 


R98 


7.1.1 


7.2.0 


ASCII coding of <MNC> and <MCC> in APN 01 


CN#06 


03.03 


A034 


R98 


7.2.0 


7.3.0 


Support of VLR and HLR Data Restoration procedures with LCS 




03.03 




R98 


7.3.0 


7.3.1 


Created to cope with wrong CR implementation 


CN#07 


03.03 


A038r1 


R98 


7.3.1 


7.4.0 


Modification of section 6.2 to enhance IMEI security 


CN#08 


03.03 


A045r1 


R98 


7.4.0 


7.5.0 


Editorial Modification of section 6.2.2 


CN#12 


03.03 


A052r1 


R98 


7.5.0 


7.6.0 


Remove reference to TS03.22 


CN#16 


03.03 


A056 


R98 


7.6.0 


7.7.0 


Restructuring the IMEI to combine the TAC and FAC 
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